Personal data processing
Access to some sections of the Website www.my-toto.com (hereinafter referred to as the “Website”) and/or any requests for information and services from users of the Website may require users to enter personal data. The official Data Controller is Alfa Refrattari s.r.l. (hereinafter referred to as “Alfa Refrattari”) who will ensure that the data is processed pursuant to Legislative Decree 196/2003 “Code on the Protection of Personal Data” (hereinafter the “Code”).
Purpose of data processing
In accordance with the requirements expressed each time by users accessing the various sections of the Website (and subject to special regulations and privacy policies for the individual operations requiring entry of specific personal data, as published on the Website), we are listing below the purpose for processing of personal data, i.e. data supplied directly by users when completing online forms or using social networks (see following section on “Character of the provision of Personal Data and procedure”) or data acquired automatically (see section on “Categories of Personal Data subject to processing”) (hereinafter “Personal Data”):
- to allow registration on the Website, required for access to particular sections of the Website itself or to deliver and manage the various services offered;
- to carry out marketing activities such as sending Alfa Refrattari’s promotional and advertising material, including by email, mms and sms messages, provided the user has given permission and only until such permission is revoked.
- to carry out studies on consumption or choice habits and define the profile of users through the information supplied by them during registration, by completing questionnaires or based on actions performed or information provided during navigation of the Website. The studies will be subject to user’s permission and only until such permission is revoked, they will comply with all legal requirements and will be aimed at personalising the users’ experience of the Website and improving the services and products offered by Alfa Refrattari to their customers.
- to answer users’ questions about Alfa Refrattari products, advertising, or about the Website (section “Contact Us” on the Website).
Users’ registration with the Website is not required for the supply of some of the services offered by Alfa Refrattari (e.g. those mentioned in paragraph ‘e’ above). However, in order to fulfil users’ requests relating to these services, they will be asked to supply personal data to be used solely for related purposes and strictly for the time required.
Personal Data will be processed mainly in electronic form using software strictly related to the uses outlined above.
Character of the provision of Personal Data and procedure
The provision of personal data is optional, but mandatory only for some personal data (i.e. data fields marked with an asterisk) to enable Alfa Refrattari to meet the user’s needs with respect to Website functions. For fields marked with an asterisk, which contain data needed for the delivery of the required service, failure to provide the Personal Data, or providing incomplete or incorrect data, will make such delivery impossible; whereas failure to provide optional Personal Data or providing incomplete or incorrect data will not have any consequence.
The provision of Personal Data occur during completion of the relevant fields in the various sections of the Website.
Regardless of whether you supply your Personal Data by completing fields, if one or more mandatory data are not provided, Alfa Refrattari will send an error message with the list of mandatory Personal Data that are missing.
Categories of Personal Data subject to processing
In addition to the Personal Data provided directly by users (such as name, last name, mailing address, e-mail, password, age, date of birth, gender, image, profession, marital status, etc.), when connecting to the Website, the information systems and software procedures involved in the operation of the Website submit and/or acquire automatically and indirectly some information that may contain personal data, whose transmission is implicit in the use of the Internet communication protocols (such as, by way of example but not limited to, the so-called “cookies” (as further specified below), “IP” addresses, domain names of the computers used by the users who connect to the website, “Url” addresses of the required resources, time of the request to the server).
Cookies are lines of text that act as computer tracks sent by a server (in this case, the server of this Website) to the appliance of a user (generally to the Internet browser) when he/she accesses a given page on a website; cookies are automatically stored by the user’s browser and retransmitted to the server that generated them each time the user accesses the same Internet page. This way, for example, cookies enable and/or facilitate access to some Internet pages to improve user navigation, or allow the storage of pages visited and other specific information, such as pages viewed most frequently, connection errors, etc. Therefore, for easier, complete use of this Website, we advise users to configure their browser to accept these cookies.
Browsers are often set to automatically accept cookies.
However, users can change the default configuration in order to disable or delete cookies (each time or permanently), with the consequence that the optimal use of some areas of the Website may be prevented. Users can also check the methods used and types of cookies that are stored on their browser by changing the cookie settings in their browser.
Cookies are lines of text that act as computer tracks sent by a server (in this case, the server of this Website) to the appliance of a user (generally to the Internet browser) when he/she accesses a given page on a Website; cookies are automatically stored by the user’s browser and sent back to the server that generated them each time the user accesses the same Internet page. This way, for example, cookies enable and/or facilitate access to some Internet pages to improve user navigation, or allow the storage of pages visited and other specific information, such as pages viewed most frequently, connection errors, etc. Therefore, for easier, complete use of this Website, we advise users to configure their browser to accept these cookies.
Browsers are often set to automatically accept cookies. However, users can change the default configuration in order to disable or delete cookies (each time or permanently), with the consequence that the optimal use of some areas of the Website may be prevented. Users can also check the methods used and types of cookies that are stored on their browser by changing the cookie settings in their browser.
Cookies types and management
- Technical cookies:
- Strictly necessary cookies:
these cookies are necessary for navigation on a Website and use of its functions, such as to enable proper viewing or access restricted areas. Therefore disabling these cookies prevents such activities.
- Performance cookies:
These cookies gather information on a Website’s efficiency in responding to anonymous user requests, with the only purpose of improving the Website’s functions; for example, what pages are visited by the user most frequently and whether there were errors or delays in the delivery of web pages.
- Functionality cookies:
these cookies allow the Website to remember the choices made by the user and bring them up again subsequent accesses in order to provide better, customised services: for example, they can be used to propose contents that are similar to any requested by the user previously.
- Strictly necessary cookies:
- Targeting cookies:
these cookies are used to show users adverts that are potentially relevant to their interests, based on information gathered during navigation. They are used, for example, to restrict delivery of a given advert, or to measure the effectiveness of a campaign based on the frequency of display of the relevant advert. These cookies can also be delivered by a third party, including on behalf of advertisers. Users can accept or reject these cookies expressing consent (‘opt-in’) before cookies are provided.
This Website uses Google Analytics, a web analytics service provided by Google, Inc. (“Google”). Google Analytics uses “cookies”, i.e. text files stored in the user’s computer, in order to analyse the way users use the Website. The information generated by cookies on the visitor’s use of the Website are transmitted to a Google server where they will be stored. Google will use this information to analyse the visitor’s use of the Website, prepare reports on activities in the Website and supply additional services to the master of this Website related to use of the Website and Internet use. The IP address transmitted by the user’s browser within the scope of Google Analytics will not be associated with any other data held by Google. The user can prevent storage of cookies by changing the software settings on your browser; however, this may make it impossible to use the full functionality of this Website. The user can also prevent registration of the data produced by cookies and associated with use of the Website (including the IP address) on Google as well as pocessing of these data by Google, by downloading and installing the browser’s plugin available through the following link: https://tools.google.com/dlpage/gaoptout?hl=en.
By using this Website, the user consents to processing of his/her data by Google in the way and for the purposes described above.
Opting out of cookies:
The legislation on the protection of personal data envisages that users can opt out of cookies that have already been delivered. The opt-out procedure is offered for “technical cookies” (art. 122 of the Code), as well as for cookies that are not part of the “technical cookies” previously accepted (‘opt-in’) by the user.
Based on this distinction, the user can disable and/or delete cookies through the relevant browser settings and disable and/or delete individual non-technical cookies delivered by third parties by accessing the website managed by the European Interactive Digital Advertising Alliance (EDAA) at the address www.youronlinechoices.eu (for EU residents) or http://www.aboutads.info/choises/ (for USA residents). These websites are not managed by the Data Controller, who therefore shall not be responsible for their contents.
How to enable or disable browser cookies.
Users can block cookies from their navigation browser. However, this could prevent correct performance of some functions in the web pages. Below, we are providing links to the main browsers’ directions for blocking navigation cookies.
- Internet Explorer: http://windows.microsoft.com/en-gb/internet-explorer/delete-manage-cookies#ie=ie-11
- Firefox: https://support.mozilla.org/en-US/kb/cookies-information-websites-store-on-your-computer
- Chrome: https://support.google.com/chrome/answer/95647?hl=en
- Safari: http://support.apple.com/kb/HT1677?viewlocale=en_GB
Categories of subjects who may access the users’ Personal Data
Personal Data may be accessed by the Data Controller’s employees or staff of who, operating under the direct authority of the Data Controller, are appointed as data processing managers or clerks pursuant to Articles 29 and 30 of the Code and who will be suitably trained for the task; similarly, the managers appointed by the Data Controller will be responsible for ensuring the training of their employees or collaborators.
Scope of communication or disclosure of users’ Personal Data
We do not sell, distribute or otherwise divulge your personal information to third parties except with your permission or when we are required to do so by law, in which case personal data may be communicated to third parties with which Alfa Refrattari has reached agreements for publication on their Websites, and thus disclosed therein.
Links to other website
Data Controller and Data Processing Officers
The Data Controller is Alfa Refrattari s.r.l., with headquarters in Anagni (FR), Via Villamagna – 03012.
User rights pursuant to art. 7 of the Code
Article 7 Right to access personal data and other rights
- The data subject has the right to receive confirmation of the existence or non-existence of personal information about him/her, even if this data has not yet been recorded, and for this data to be communicated to him/her in an intelligible form.
- The data subject also has the right to be informed of:
- the origin of the personal data;
- the purposes and methods of the data processing;
- the programme used in the event of the data being processed using electronic means;
- details identifying the Data Controller, the data processors and the appointed representative pursuant to Article 5, paragraph 2;
- the subjects or categories of subjects to whom personal information may be disclosed or who may gain knowledge thereof in their capacity as appointed representatives for the country, data processors or officers.
- The data subject has the right to receive:
- an update, rectification or, if he or she requests it, an addition to the data;
- the cancellation or change to anonymous status or a block on the data processed in breach of the law, including personal data that is not required to be stored for the purposes for which the data was initially collected or subsequently processed;
- a declaration that the operations specified under (a) and (b) and their contents, have been reported to the persons to whom personal data was disclosed or disseminated, except where this is impossible or implies the use of means that are clearly disproportionate compared to the rights protected.
- The data subject has the right to fully or partially object to:
- the processing of his/her personal data, for legitimate reasons, even if this data is relevant for the purpose for which the data was collected;
- the processing of personal data relating to him/her for the purpose of sending advertising material or for direct sales, or for carrying out market research or marketing communications.
How to exercise rights pursuant to art. 7 and to get to know the list of Data Processing Officers
The user may at any time, exercise the rights referred to in art. 7 of the Code by sending an e-mail message to email@example.com or a letter sent by ordinary mail to the Data Controller of the personal data concerned.
Furthermore, if the user has consented, he/she shall be entitled to object to data processing for the purposes referred to in (c) via the user’s email address, by clicking on the “link” provided for that purpose in each email message.
The cookies we use and the information they contain are described in the table below..
|COOKIE name||COOKIE description|
|CART||Association with the cart.|
|CATEGORY_INFO||Saves information on the category of the page and permits quicker visualisation of the pages.|
|COMPARE||The products selected for comparison.|
|CURRENCY||The preferred currency.|
|CUSTOMER||An encrypted version of the customer’s ID.|
|CUSTOMER_AUTH||Indicates whether the user has accessed.|
|CUSTOMER_INFO||An encrypted version of the information on the category to which the user belongs.|
|CUSTOMER_SEGMENT_IDS||Saves the “Customer Segment ID”|
|EXTERNAL_NO_CACHE||An indication of whether the cache is disabled or not.|
|FRONTEND||The identification of the session on the server.|
|GUEST-VIEW||Allows guests to modify their orders.|
|LAST_CATEGORY||The last category visited.|
|LAST_PRODUCT||The last product visited.|
|NEWMESSAGE||Indicates whether a new message has been received.|
|NO_CACHE||Indicates whether using the cache is permitted.|
|PERSISTENT_SHOPPING_CART||A link to information on the cart and visualisation of the history if you have asked the site.|
|POLL||The ID of any polls in which the user has recently taken part.|
|POLLN||Information on the results of the polls.|
|RECENTLYCOMPARED||Recently compared products.|
|STF||Information on the products mentioned to friends via e- mail.|
|STORE||The view or language selected.|
|VIEWED_PRODUCT_IDS||Recently viewed products.|
|WISHLIST||An encrypted version of the products added to the wish list.|
|WISHLIST_CNT||The number of products on the wish list.|
|giudeMessageRead||Used to display or hide the “Selection tool” message on the filter bar.|
|_ga (Google Analytics)||Used to distinguish users.|
|_gat (Google Analytics)||Used to throttle request rate.|
|__utmt (Google Analytics)||Used to throttle request rate.|
|__utmc (Google Analytics)||Not used in ga.js. Used for interoperability with urchin.js. Historically, this cookie operated in conjunction with the __utmb cookie to determine whether the user was in a new session/visit.|
|__utmv (Google Analytics)||Used to store visitor-level custom variable data. This cookie is created when a developer uses the _setCustomVar method with a visitor level custom variable. This cookie was also used for the deprecated _setVar method. The cookie is updated every time data is sent to Google Analytics.|